How a cybersecurity researcher befriended, then doxed, the leader of LockBit ransomware gang

This article recounts how security researcher Jon DiMaggio infiltrated the LockBit ransomware group, developed a relationship with its administrator known as “LockBitSupp,” and ultimately identified and published the administrator’s real identity (Dmitry Khoroshev) after law enforcement seized the gang’s leak site; the report also highlights LockBit’s ongoing ransomware activity, including attacks against hospitals and the interplay between researchers and authorities in unmasking criminal operators.